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Abstract. We give a general recipe for explicitly constructing asymptotically optimal tow- 
ers of modular curves such as {Xq (/")}„>!■ We illustrate the method by giving equations 
for eight towers with various geometric features. We conclude by observing that such tow- 
ers are all of a specific recursive form and speculate that perhaps every tower of this form 

O , which attains the Drinfeld-Vladut bound is modular. 
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Introduction. Explicit equations for modular curves have attracted interest at least since the 
classical work of Fricke and Klein. Recent renewed interest in such equations has been stim- 
^ . ulated on the one hand by the availability of software for symbolic computation and on the 

other hand by specific applications. In [E] we considered the use of modular curves to count 
r , rational points on elliptic curves over large finite fields, and illustrated some other applications 

Yyr \ of equations for the curves Xo(A^) with small (say A^ < 10^). Another kind of application 

is to coding theory: good Goppa codes [G] require curves of large genus g over a fixed finite 
field k = Yq whose number of rational points grows as a positive multiple of g. Drinfeld and 
^ ' VladuJ showed that as (7 ^ oo no multiple greater than (g^/^ — V)g is possible. Ihara [I] and, 

independently, Tsfasman, VladuJ, and Zink [TVZ] showed that this upper bound is attained by 
the supersingular points on appropriate modular curves when g is a square. For this application 
^ ■ modular curves — elliptic, Shimura, or Drinfeld — are needed whose level is too high to apply 

. the methods of [E] directly, and in general one does not expect to have any pleasant model for 

a curve of high genus. However, if the curve is of smooth level then it tops a tower of 0(log q) 
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\ covers of low degree, and one may hope to obtain equations for the curve by writing those 

' covers explicitly. 



O 

s 



In this paper we show how to do this recursively for towers such as {Xo(/")}n>i- It turns out 
that only information about the first few levels of the tower is needed, and that this information 
can be obtained for modular elliptic curves using the methods of [E], and for some Shimura 
curves using only the ramification structure. We then illustrate the method by giving explicit 
^ ■ formulas for eight asymptotically optimal towers: six of elliptic modular curves, namely Xo(/") 

^ . for / = 2,3,4,5,6, and Xo(3 ■ 2"); and two of Shimura modular curves. Over any finite 

^ ! field whose characteristic does not divide the level of these modular curves, the towers are 

tamely ramified, making it easy to calculate the genus of every curve in the tower. [This 
contrasts with the wildly ramified tower of [GSl], whose genus computation required some 
ingenuity; we show elsewhere that that tower too is modular, of Drinfeld type.] For each finite 
field k over which one of our towers is asymptotically optimal, the optimality can then be 
shown by elementary means, independent of the tower's modular provenance, by exhibiting 
the coordinates of the rational (supersingular) points. These formulas may also have other 
uses, e.g. in finding explicit modular parametrizations of elliptic curves with smooth conductor, 
or in connection with generalizations of the arithmetic-geometric mean (which corresponds 
to the Xo(2") tower) as in [S1,S2]; we hope to pursue these connections in future papers. 
We conclude this paper with a speculation concerning the modularity of "any" asymptotically 
optimal tower. 
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The curves Xo(/"). Fix a prime / > 1. For positive n, the elliptic modular curve Xo(/") over 
any field k in which / 7^ parametrizes elliptic curves with a cyclic /"-isogeny, or equivalently 
sequences of /-isogenics 

Eq El ^ E2 ^ ■ ■ ■ ^ En (1) 

such that the composite isogeny Ej_i — > -Ej+i of degree P is cyclic for each j with < j < n. 
Thus for each m = 0,1, . . . ,n there are n + 1 — m maps nj : Xo(/") — > Xo(/"^) obtained by 
extracting for some j = 0,1, . . . ,n — m the cyclic /^-isogeny Ej Ej+m from (|1]). Each of 
these maps has degree unless m = when the degree is (/ + In particular we 

have a tower of maps 

Xo(r) ^ Xo(r-^) ^ Xo(r-') ^ • ■ • ^ Xo(/') ^ Xo(/), (2) 

each map being of degree /. Each Xo(/'^) also has an Atkin-Lehner involution wi = Wj'^^ taking 
a cyclic /"-isogeny to its dual isogeny, and the sequence to the sequence 

En E2 El Eq (3) 

of dual isogenics. We thus have 

Wl OHj = Hn-m-j owl \ (4) 

where Ttj, T^n-m-j are our jth and {n — m — j)th maps from Xo(/") to Xo(/'^). 

When = C, we may regard Xo(A^) as the quotient of the extended upper half -plane Ti* = 
7iUP^(Q)by ro(A^). Then the ro(/") orbit of a point r G parametrizes the isogeny between 
the elliptic curves with period lattices Z + rZ and /^"Z + rZ, the map tij takes the ro(/") orbit 
of r to the ro(/'") orbit of Pt, and the involution w^^^ is represented by r < — > — l//"r. 

Now the key observation is that explicit formulas for Xo(/), Xo(/^), together with the involu- 
tions wl^\wl'^^ of these curves and the map ttq : Xo(/^) Xo(/) between them, suffice to 
exhibit the entire tower @ explicitly: 

Proposition. For n ^ 2 the product map 

TT = TTo X TTi X 7r2 X ■ ■ • X 7Tn-2 : Xo(/") (Xo(/'))"-^ (5) 

is a 1:1 map from Xo(/") to the set of {Pi, P2, • • • , Pn^i) e (Xo(/2))"~^ such that 

7ro{wl'\P,)) = wl'\no{Pj^i)) (6) 

for each j = 1,2, . . . ,n — 2. 

Informally speaking, we get from Xo(/^) up to Xo(/") by iterating n—2 times the involution wp-* 
composed with the "/-valued involution" 7r(j"^iL';^''7rQ. Of course the maps tTj : Xo(/") — > Xo(/™) 
(for m ^ 2) are then simply 

(Pi, . . . , Pri-l) ^ (-Pj+l) • • • ! -Pj+m-l), (7) 

and the involution is 

(Pi, P2, . . . , P„_2, P„-l) ^ {wl'^Pn-l,wl'^Pn-2, • • • , U-^Ps, W^f^Pl), (8) 
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i.e. reversing the order of Pi, . . . , P„_i and applying to each coordinate. 

Proof^ That the map is 1:1 to its image is clear, because a sequence ([T]) of /-isogenics is 
determined by the /^-isogenics Ej_i — > -Ej+i parametrized by the jth coordinate of vr (0 < 
j < n). Now (Pi, . . . , Pn-i) is in the image of vr if and only if the /^-isogenics parametrized 
by Pi, . . . , P„_i, regarded as sequences El El ^ E^ of /-isogenics, fit together to form 
a sequence (HJ) with Ef = Ei^j, i.e. if and only if the isogenics E( —>■ E{ and E^^^ —>■ E('^'^ 
coincide for each j = 1, 2, . . . , n — 2. But these isogenics are represented by the points 7^i{Pj) 
and 7ro(Pj+i) on Xo(/). Thus the necessary and sufficient condition is that 

7ri(P,) = 7ro(P,+i) (9) 

for each j = 1, 2, . . . , n — 2; applying w^^^ to both sides, and then (0) to wp-'(7ri(Pj)), then 
yields the equivalent form (^. □ 

Examples: The cases / = 2, 3, 5. Our formulas are particularly simple when Xo(/^) (and thus 
also Xo(/)) has genus 0, for then we may use a Hauptmodul (or for that matter any rational 
parameter^) of Xo(/^) to regard Pi, . . . , P„_i as n — 1 rational coordinates on Xo(/"), and (^ 
as the n — 2 algebraic relations on those coordinates that determine the curve Xo(/"). This 
happens for / = 2, 3, 5; we exhibit formulas for each of these cases. 

In the first two cases the cover ttq : Xo(/^) Xo(/) is cyclicj^ For / = 2 we parametrize 

Xo(/2)=Xo(4) by 

e(r) := 1 + ^ = liq-' + 20g - 62g3 + 216g5 - 641g^ + -■■■), (10) 

whereas usualg = e^'"*'^ and?7istheweight-|modularformn5^i(l— 9^)- Using the functional 
equation 

r/(-l/r) = (r/z)i/2r/(r), (11) 

(2) 

we find that the involution W2 takes ^(r) to 

Let /i2 be the Xo(2) Hauptmodul 

/i2(t) = (^^j^^ = g"' - 24 + 276g- 2048g2 + ll202g3 - + .... (13) 



^ More properly, a proof sketch, since we suppress some details, such as what happens at the cusps. To show 
that our formulas extend to the cusps one may either quote general facts about maps between affine and projective 
algebraic curves, or regard the cusps as parametrizing isogenics between Tate curves. Also, two cyclic Z-isogenies 
may determine the same point on Xo(/) without being isomorphic; the necessary and sufficient condition is that 
they become isomorphic over the algebraic closure. 

"Hauptmodul" is a rational parameter with a pole of leading coefficient 1 at the infinite cusp, i.e. a degree- 1 
rational function of the form q^^ + 0(1). 

For any N, the cover ttq : Xo(iV^) — > Xq{N) is cyclic if and only if the unit group of Z/A^Z has exponent 2, 
which happens when A^ |24. When A^ = 1,2, 3, 4, 6, it is furthermore true that ±1 are the only units of Z/NZ, 
and then the cyclic A^-isogenies Ei Eq, E2 together with the Weil pairing on -Ei[A^] determine a complete 
level-A^ structure on Ei mod ±1, i.e. Xo{P) = X(/). 
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Computing the map ttq : Xo(4) Xo(2) then amounts to writing /i2 as a rational function 
in ^. We do this by in effect expanding this function as a continued fraction. Necessarily that 
function has degree 2 with a simple pole at the cusp ,^ = 00. But then h2 — 8^ + 24 is a 
rational function of degree 1 in ,^ with a simple zero at 00, i.e. the inverse of a polynomial of 
degree 1 . Comparing the g-expansions of 1/ (/12 — 8^ + 24) and ^, we find that this polynomial 
is + l)/32 and recover the formula 

(2) 



Using our formula (12) for the involution W2 we then obtain also 



But w^2^ acts on Xo(2) by /la ^ 2^V/i2 (again by (|ll])). Thus /i2(2r) is both 64(^(r)2 - 1) and 
64/ (^(— l/8r)^ ~ 1)- Equating these two expressions yields an equation for the modular curve 
Xo(8); more generally we now deduce from our Proposition the following explicit equations 
for the modular curve Xo(2") for each n > 1: 

Let Xj (0 < j < n) be the rational function ^{2^^^t) on that curve (this is the coordinate Pj of 
the Proposition); then (xi, . . . , identifies Xo(2") with the curve in (P^)"~^ specified by 
the n — 2 equations 

(x^ - l){z^^, - 1) = 1 (j = 1, . . . ,n - 2), (16) 

where 

:= (xj + 3)/(x, - 1) (17) 

is obtained from xj by the involution 



Curiously we obtain analogous equations for Xo(3") by replacing the exponent 2 by 3 in ( |T6| ) 



and, as if to compensate, changing the constant term 3 to 2 in ([T7|): the curve Xo(3") is isomor- 
phic with the locus of (xi, . . . , x„_i) in (P^)"^^ satisfying 

{x'j - l)(z|+i - 1) = 1 (j = 1, . . . , ri - 2), (18) 

where 

:=(x,+2)/(x,-l). (19) 
Here the coordinate functions Xj on Xo(3") are where 

= 1 + 1 = liq-' + 5g - 7q' + 3q' + 15q'' - 32q'' ■ ■ ■), (20) 

(2) 

so ^ generates the field of rational functions on Xo(9). The involution wj^ takes this ^ to 
1 + 3/(^ - 1) = + 2)/(^ - 1), whence i^; the Hauptmodul 

h3ir)=(-^l^] =9"'-12 + 54g-76g2-243g3 + 1188g'--- (21) 
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goes to 37/13 under w^^\ and hsi^r) is both 27/(^(-l/27r)=' - 1) and 27{^{rf - 1), from 
which the equations ( [TSiirgl ) for Xo(3") follow thanks to our Proposition. 

Note that the already simple equations for Xo(2'^), Xo(3^) simplify even further in characteristic 
3, 2 respectively: taking yj = 1 — xj^ in ( [T6| , p^ and setting 3 = yields 

Vj+i = Vj - Vl (22) 



and the same substitution in ( [r8| . [T9| ) with 2 = produces 

y^+^ = y^ + y] + yj. (23) 

Li this guise these asymptotically optimal towers were obtained by Garcia and Stichtenoth [GS2, 
Examples C,D], independent (as in [GSl]) of their modular interpretation. In both cases the 
supersingular points are the poles of yi and thus of all the yj. 

Finally for / = 5 we obtain 

P{xj)P{z,+,) = 125 (j = 1, . . . ,n - 2), (24) 

where 

P(X) :=X^ + 5X3 + 5X-11, Zj:={xj+A)/{xj-l). (25) 
Here the coordinate Xj is ^(S-'^^r) where 



ar) = i + ^^=g-'-q + g' + q'-q''-g'' + g'' + q''-g''---. (26) 

As usual, Zj is the image of xj under and P{xj) = h^{hT) where is the Xo(5) Haupt- 
modul ^ 

^5(r) = {^^^^ = - 6 + 9g + lOg' - 30?^ + Qq" - 25g^ • • • (27) 

with /i5(r)/i5(— l/5r) = 125. The polynomial P{X) is necessarily not as simple as the poly- 
nomials — 1, X'^ — 1 occurring in ( [T6|jr8| ), because the cover Xo(25) Xo(5) is not cyclic. 
It is, however, dihedral, as may be seen from the fact that P(W — 1 /W) = — 11 — W^^. 

First variation: composite /. The assumption that / be prime was not necessary; the entire 
description carries over to the composite case, except for the incidental point that the degree 
of the maps nj : Xo(/") — > X(l) is given by a formula more complicated than (/ + l)/"~^ 
[namely /" np|«(l + ^)]- For instance we exhibit formulas for the cases / = 4, 6, where the 
cover ttq : Xo(/^) Xo(/) is still cyclic. 

In the first case / = 4 the curve Xo(/^) = Xo(16) is still rational, and we obtain formulas 
remarkably similar to those for / = 2, 3 by choosing 

as a rational coordinate on Xo(16). Then wf^ takes ^ to {^+ 1)/(,^ — 1). The Xo(4) Hauptmodul 

hJr) = ( =q'^-8 + 20q - 62q^ + 216g^ - 641g^ + (29) 

V?7(4r); 
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(cf. ([TO|)) is mapped by ^4^"* to ^'^/h^, and we compute 

hMr) = = 16(e(r)^ - 1). (30) 

^ ' ^(-l/64r)4-l v^v ; ; 

Therefore Xo(4") is isomorphic with the locus of (xi, . . . , Xn-i) in (P^)"^^ satisfying 

(xj - - 1) = 1 (j = 1, . . . , n - 2), (31) 

where 

Zj := (x,- + l)/(x, - 1), (32) 

the coordinate functions Xj on Xo(4") being ^{A^^^r). Of course the resulting curves also 
occur in the Xo(2"^) tower, but this fact is far from obvious from comparison of the formulas 
([1^,0) and (0,11). 

The case of / = 6 is slightly more complicated because the curve Xo(/^) is no longer rational. It 
is, however, an elliptic curve with a simple Weierstrass equation: the ring of rational functions 
on Xo(36) regular except possibly at the cusp r = ioo is generated by 

i(t) = ''Tr?'Cir? = + + 9' - 29'= - 2," + 2," + 44'=' .... (34) 

related by the Weierstrass equation 

i' = e+ 1- (35) 

The involution Wq has a fixed point at z/6. An involution of an elliptic curve which has a fixed 
point must be multiplication by —1 composed with a translation. Thus to determine w^^ we 
need only find the image of one point. It is easiest to do this with the cusp r = zoo: its image 
is the cusp r = 0, at which 7) = (2, 3) (a 6-torsion point on the curve (^5])). It remains only 
to find the map from Xo(36) to Xo(6) and the involution We use the Hauptmodul 

^'^^^ = ^(1"")^^) =q-'-5 + 6q + W - ^q' " I2q' - 8q' + W " " " • (36) 

Then w^^ takes to 72 /h^, and by comparing g-expansions we find 

K{Qt) = e{r) - 8. (37) 

We thus identify Xo(6") with the curve of (n — l)-tuples ((xi, yi), . . . , {xn-i,yn-i)) of points 
on the elliptic curve y'^ = x^ + 1 satisfying the n — 2 conditions 

(x^ - 8)(4+i - 8) = 72 (j = 1, . . . , n - 2), (38) 

where 

is the x-coordinate of the point (2, 3) — (x, y) on = x^ + 1. Unlike the curves in the Xo(4") 
tower, these curves Xo(6") are new; to be sure they could also be exhibited as composita of 
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the already known covers Xo(2")/X(l) and Xo(3")/X(l), but those models are much harder 
to work with because of the complicated singularities above the branch points j = 0, 12^, oo. 

Second variation: changing the base of the tower. Instead of the tower of modular curves 

Xo(/") = H* /Tq{1"-) we could use H*/{A fl Tq{1"')) where A is some other congruence sub- 
group of PGL2(Q), as long as the modulus of the congruence is prime to /. For instance, given 
> 1 with (/, A^) = 1 we could use the tower Xo(M") of curves parametrizing sequences of 
/-isogenics between pairs of elliptic curves related by a cyclic A^-isogeny. Again these curves 
with n > 1 form a tower related by maps tTj of /-power degree and admitting involutions wl"'\ 
and knowing these maps and involutions forn = 1, 2 yields explicit formulas for Xo(A^/") for 
all 72 > 1 as in our Proposition. ^ 

We illustrate with the case / = 2, = 3. In this case the first two curves Xo(6), Xo(12) are 
rational and we can mimic our procedure for the towers Xo(/") with / = 2, 3, 4. Our (n — 1) 
coordinates on Xo(3 ■ 2") will be xj = ^(2-'^V) (0 < j < n) where 

= 'l-'+^l + i-^i'- ■'■i + ■'■i + 4," . . . (40) 

(cf. (P^) is a Hauptmodul for Xo(12). It is this time more convenient to let /ig be the Xo(6) 
Hauptmodul 

h,{T) = ( ^(2^)f (3^) y = g-i + 3 + 6g + V - ^q' - 12g^ - 8q' ■ ■ ■ , (41) 



which differs by 8 from our choice in (P^. We may then represent ^2^^ and ^2^"* by r < — > 
(2r - l)/(6r - 2) and r < — > (4r + 3)/(4r + 4); these involutions take to -S/he and ^ to 
(3 — 0/(1 + 0- By computing the quadratic map Xo(12) — > Xo(6) we find that this time 

h{2r) = = e(r)2 - 1. (42) 

'tY - 1 

Thus the equations on xi, . . . , defining Xo(3 ■ 2") are 



l)(4+i-l) = -8 (i = l,...,n-2), (43) 



where 



'3 



(3-x,)/(l + x,). (44) 

Note that in this case the curves in our tower also have an involution w-^ commuting with all 
the ^2"^; we find that this involution is Xj ^ — 3/xj. That this in fact acts on our model of 
Xo(3 • 2") is easy to check after writing ( P3|J^ ) in the equivalent form 



(xj+i - l)x] = x^+i + 3xj+i. (45) 



* As with Xo(6") we could also obtain Xo{Nl^) as a compositum of X(){N) and Xo(/"), but the resulting 
model is highly singular. Warning: on Xo(A^/")/C the involution uij"' is given not by t ^ — 1//"t but by a 
fractional linear transformation of the same determinant that reduces mod N to an element of ro(A^). We do still 
have a simple formula T <-> — l/A^PV for the product of it;|"' with the Atkin-Lehner involution wn- 
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Third variation: Shimura modular curves. Shimura curves generalize the classical elliptic 
modular curves: instead of Ti* /V for an arithmetic subgroup V of PGL2(Q), they are the quo- 
tients 7i/r by an arithmetic subgroup of a quaternion algebra A over some totally real number 
field K, with A ramified at all but one of the infinite places of K. Instead of elliptic curves, 
these Shimura curves parametrize principally polarized abelian varieties with endomorphisms 
by A and some extra structure determined by the choice of V. There are Shimura curves 
(I an ideal of K coprime with the discriminant of A) analogous to Xo(A^), which have Atkin- 
Lehner involutions and form towers, and whose reductions at a prime of K are asymptotically 
optimal over the quadratic extensions of its residue field. These towers may be obtained from 
their first two levels by the recipe of our Propositions. 

Unlike the classical Xo(A^), the analogous Shimura curves ^"0(1) have no cusps. Thus the 
curves and maps between them cannot be computed using g-expansions. Even worse, in gen- 
eral we do not even have explicit equations for the abelian varieties parametrized by these 
curves. Nevertheless we can in many cases use the ramification behavior of the covers to de- 
termine the necessary maps completely. We illustrate this with two examples which have the 
additional feature of involving only cyclic covers which become unramified after finitely many 
steps and thus also occur in class-field towers.0 

We start with K, A such that A* contains an arithmetic subgroup A which is also a triangle 
group. Such A have been classified completely [T]: there are 76, in 18 quaternion algebras (not 
including the nine triangle subgroups of PGL2(Q) with one or more cusps among the vertices). 
For our first example we take K = Q(v^) and A/K = the quaternion algebra ramified at 
(v^ ) and at one infinite place, and choose for A the group called T^'^\A, Oi) = T^*\A, Oi) 
in [T], which is identified there with the (2, 4, 12) triangle group. We shall construct the tower 
{A'o(p2)}n>i5 where p2 is the prime of K of residue field F2. 

The curve = H/ Ais rational. We choose a coordinate J taking the values 1, 0, cxd at the 
elliptic points of order 2, 4, 12. The curve ^"0(^2) consists of ordered pairs of points of 
related by a "p2-isogeny"; choosing one of these points yields the degree-3 map ttq : Xq{p2) 

We next determine the ramification of this map. In general, the map Xq(I) — > ^"(1) is 
branched only above elliptic points of ^"(1), if a point P of Xo(I) above an elliptic point of 
order e parametrizes an isogeny to some other point of order e' then the ramification index at P 
is the denominator of the fraction e'/ e. [A non-elliptic point is taken to have order 1 .] We may 
regard ^0(^2) as a symmetric (3,3) correspondence on x We then see that the 

point J = 00 of order 12 must correspond to the point J = of order 4 with multiplicity 3; 
the point J = corresponds to J = 1 doubly and J = 00 singly; and J = 1 corresponds to 
J = singly and some other point doubly. No other points of are ramified in ^"0(^2)- 
Thus by the Riemann-Hurwitz formula Xq{p2) is again a rational curve, and J is a function of 
degree 3 with a triple pole such that J and J — 1 both have double zeros. Up to Aut(P^) there 
is a unique such function; we choose a rational coordinate t on ^0(^2) such that J = t(4t — 3)^ 
(so J — 1 = (t — l)(4t — 1)^). Then the involution^ w^^) must interchange the points t = 0, 
t = 00 parametrizing isogenics between J = and J = 00, and the points t = 1, t = 3/4 

^ Note that this is not possible with elHptic modular curves, or for that matter with Drinfeld modular curves, 
precisely because of their cusps. However, the ramification in towers of elliptic or Drinfeld modular curves is 
small enough to be captured by a tower of ray class fields, suggesting that ray class-field towers might be a fruitful 
source of curves with many points even over finite fields of non-square order. 

^ We suppress the unwieldy subscript p2. 
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parametrizing isogenics between J = and J = 1. Therefore w^^\t) = 3/4t. 

Now the curve Xo(pl) covers Xq(p2) with degree 2, and the only branch points are t = oo and 
t = 3/4. Thus Xq(p2) is again a rational curve, and we may choose a rational coordinate ^ 
for it such that t = (^^ + 3)/4. Of the points ^ = ±1 above t = 1, one must parametrize a 
p2-isogeny from J = 1 to J = oo, the other an isogeny from J = 1 to itself; we choose ^ so 
the former point is ^ = 1. Then w^"^^ must switch that point with the point ^ = oo, and fix the 
other point ^ = — 1; therefore this involution is ^ < — > + 3)/(^ — 1). As a further check 
on the computation, note that this involution also switches the two points ^ = ±-\/^ above 
t = 0, parametrizing a p2 "isogeny from J = to itself. 

We now have all the information needed to determine the Shimura modular curve Xo{p2) foi" 
all n > 1: that curve has n — 1 coordinates xi, . . . , Xn-i, satisfying the n — 2 relations 




3 
4' 



(46) 



that is, 

(x| + 3)(zJ+i + 3) = 12 (j = 1, . . . , n - 2), (47) 

where 

:=(x,+3)/(a;,-l), (48) 

the same involution we used in ( [T7| ) for the tower of classical modular curves Xo(2"). Unlike 
these curves, though, the Shimura tower Xq{p2) turns out to be unramified past n = 5, as may 
be seen either directly from the formulas ( p7| , p^ or from the general description of ramification 
in the map Since each step in the tower is a cyclic extension, it follows that 

over any finite field of odd characteristic the tower is dominated by the 2-class-field tower of 
the curve ^"0(^2)- 

For our second example, we choose for K the cubic field Q (2 cos 7r/9) and for A the quaternion 
algebra ramified only at two of the three infinite places of K. Then we find in [T] that the group 
of units of norm 1 in A is the (2, 3, 9) triangle group. We exhibit the tower {Ao(p3)}„>i, where 
p3 is the prime of K of residue field F3. The equations were obtained in the same way that we 
found (B7|,BB|); we leave the intermediate steps as an exercise. Again we find formulas similar 



to those we obtained earlier (18,19) for the classical modular curves: there are n — 1 coordinates 



xi, . . . , Xn-i, related by n — 2 equations 

4 + = 1 (j = l,...,n-2) (49) 

(this time even simpler than the equation ( [TSl ) for the classical case), where again 

zr.= {x,+2)/{x,-l). (50) 

Again the tower has cyclic steps and is unramified after finitely many steps; we find that it is 
dominated by the 3-class-field tower of the curve Xq^p"^). 

Fantasia: a speculation on modularity. All our towers are of the following form: the bottom 
curve Ci over some finite field k is equipped with an irreducible correspondence $ C Ci x Ci 
of bidegree (/, /) and a set S* C Ci{k) of rational points each of which corresponds under $ 
with / distinct points also in 5*; the n-th curve in the tower is then the curve C„ of n-tuples 
(Pi, . . . ,Pn) e Ci such that (P,, P^+i) e $ for j = 1, 2, . . . , - 1. Then C„ has at least 
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lySj rational points, and at least when $ is tamely ramified we can find the genus of C„ as a 
function of n. For instance, if Ci = Xo{P), $ is the image of Xo(/^) under ttq x tti, and S is the 
set of supersingular points, then we recover the tower of curves Xo(P"'"^) of our Proposition. 

But the (Ci, $, S) description makes no assumption of modularity: we can, as in [GS2], try any 
Ci and $ and hope to find an S that yields many points on C„. In fact, several such (Ci, $) were 
found to admit S large enough to make the tower {Cn} asymptotically optimal [GS1,GS2]. 
However, in each such case {Cn} was subsequently explained as a modular tower. 

This leads us to speculate: perhaps every asymptotically optimal tower of this recursive form 
must be modular? 
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